1import ../make-test-python.nix (
2 { ... }:
3
4 {
5 name = "pam-u2f";
6
7 nodes.machine =
8 { ... }:
9 {
10 security.pam.u2f = {
11 enable = true;
12 control = "required";
13 settings = {
14 cue = true;
15 debug = true;
16 interactive = true;
17 origin = "nixos-test";
18 # Freeform option
19 userpresence = 1;
20 };
21 };
22 };
23
24 testScript = ''
25 machine.wait_for_unit("multi-user.target")
26 machine.succeed(
27 'egrep "auth required .*/lib/security/pam_u2f.so.*cue.*debug.*interactive.*origin=nixos-test.*userpresence=1" /etc/pam.d/ -R'
28 )
29 '';
30 }
31)